This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
File:                     fU328vfdsHN-2q2EhSP4cXbnzoE.mft (raw, json)
Hash identifier:          smJ+h1Xe1tilfBWUirqIpbeXYK5m31tDqieNgBBRf84=
Subject key identifier:   73:68:13:37:66:93:27:AE:42:69:68:57:C0:6C:3C:84:8A:A1:F5:57
Authority key identifier: 7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
Certificate issuer:       /CN=F3640C3CAF/serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
Certificate serial:       0151
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
Manifest number:          0150
Signing time:             Tue 09 Dec 2025 04:48:28 +0000
Manifest this update:     Tue 09 Dec 2025 04:48:27 +0000
Manifest next update:     Thu 11 Dec 2025 04:48:27 +0000
Files and hashes:         1: fU328vfdsHN-2q2EhSP4cXbnzoE.crl (hash: ZqPcQ72gc8GfO0kBnNdH4X1WeK5GwOJTygLB2mVnLoA=)
                          2: 9E9AD310D2BF11EFBBD01F9D762E951A.roa (hash: sKmiIxBHJPr3OGeB7htmDk2gGj7RAu5zKpegjCoJFAY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640C3CAF, serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
        Validity
            Not Before: Dec  9 04:48:27 2025 GMT
            Not After : Dec 11 04:48:27 2025 GMT
        Subject: CN=6937aa1c-396b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a6:90:72:e9:c3:11:81:5e:69:b2:55:81:36:
                    69:44:bf:da:07:fa:1d:bb:6b:1b:fd:71:aa:0a:6d:
                    56:3d:c4:0a:7c:10:a7:93:e4:ed:0c:af:3e:ca:ed:
                    49:94:5a:db:92:bd:44:95:9d:72:4e:0b:31:0d:73:
                    40:70:4a:43:7d:06:2a:3e:35:7f:02:15:5c:35:4c:
                    ed:28:1c:2b:e6:91:70:d1:da:7b:3a:45:3c:54:c0:
                    e9:c0:32:39:96:ac:84:37:a7:4e:5c:80:e6:85:13:
                    f9:7e:f2:fe:b7:0f:d1:22:c4:28:5e:f7:b2:2a:b8:
                    ad:29:8f:4a:8f:b6:db:c8:02:96:37:87:ed:bc:03:
                    0e:26:66:77:7e:9c:9a:3e:14:48:20:5e:6c:1c:6c:
                    41:d4:aa:d5:4b:e8:82:e8:be:3b:7e:62:66:6f:21:
                    6b:af:05:5d:88:3b:e1:6d:de:e9:34:83:13:34:4e:
                    5e:c0:77:77:9f:86:54:c3:00:6d:3a:1f:60:74:46:
                    77:5b:5c:0f:52:8a:7a:09:ce:3c:3e:9d:f5:30:76:
                    d6:40:a7:26:6f:3d:c3:4b:c2:f3:9d:2d:fb:7b:84:
                    18:d9:d2:08:4a:b7:b5:6c:5c:15:3a:4e:06:fd:53:
                    be:d0:2a:63:7c:99:38:93:e6:1e:41:f3:63:a3:29:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:68:13:37:66:93:27:AE:42:69:68:57:C0:6C:3C:84:8A:A1:F5:57
            X509v3 Authority Key Identifier:
                keyid:7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:1b:24:93:ba:32:b4:ac:4f:56:0e:38:31:9a:df:f2:e0:82:
         3b:c4:27:e4:e9:c7:93:19:e3:53:98:3d:06:c1:70:8b:c7:f4:
         da:b8:56:b6:a3:34:cd:a0:f0:76:90:7f:ab:68:6e:78:c6:3e:
         b2:7a:5f:97:fb:30:c8:77:45:84:70:52:77:ad:a9:97:1f:2f:
         d1:8a:5f:21:ff:f5:f8:7b:0a:97:db:cb:ca:f0:db:b8:e2:52:
         f0:54:6e:8b:9e:dd:f4:4f:5a:8e:13:98:c8:7b:9b:bf:91:a0:
         af:55:b0:2f:2b:12:67:bc:c5:2a:3f:3b:df:31:e3:6e:b7:84:
         e0:2f:b3:c8:09:9e:5f:ec:57:41:33:de:e7:2c:7f:b7:c5:54:
         0a:2b:f9:71:9c:29:08:35:50:db:d8:11:b3:b4:d8:cf:13:9e:
         0d:b6:8b:43:dc:58:3e:90:4b:bc:b1:5f:8e:9c:e1:cc:7e:a1:
         b3:cf:0b:14:db:f0:d0:4f:47:f9:38:fa:74:58:5f:f7:5a:3a:
         a7:91:06:97:0b:7a:1f:98:81:38:7e:c8:a2:b8:cb:bb:f3:13:
         71:55:7f:92:e6:9b:f5:5a:59:4e:bf:3f:4b:6f:fd:94:f7:8b:
         19:15:8f:90:d4:ff:26:9f:90:e8:0b:71:16:ca:0a:71:98:26:
         01:83:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:17:19 2025 by rpki-client